11.3.1 Release Notes

When upgrading Privilege Managerto a newer version, Delinea recommends upgrading the Directory Services agent such that both are running on the same release version.

Enhancements

  • Workstation User accounts can now be created with a static password or a random password. Refer to User Management.
  • For improved usability, the Details and Password tabs have been combined on the User Management page.
  • Azure Active Directory domains now support the Azure Government Cloud instance with a new Government Instance setting.

Bug Fixes

  • A Policy Priority from the Application Policies page now enforces maximum values of 10,000.
  • From the Event Summary widget on the Dashboard, the numbers displayed for categories correctly reflect the amount of events on the Event Summary page.
  • Documentation has been updated to clarify the relationship of Product Licenses reports to the actual license values reflect on the Home screen.
  • Scheduled Job names have been restricted to prevent scheduling and display issues. Only the following special characters are permitted: ".", "-", "_". and "()".
  • If an agent requested a hash filter before collections were updated, the filter would not be properly applied to a policy. We now properly detect collection changes and rebuild these cached items.
  • User-defined endpoint groups that previously appeared under the root of a user-defined target now appear in Windows-specific and macOS-specific folders.
  • When saving managed User Group updates, a cached definition of the computer Group was saved, potentially reverting recent changes to the computer group. Now, the updated Computer Group is saved with the updates.
  • Resolved an issue with multiple policies not triggering in the correct order for the same event. Now, the higher priority policy will always trigger the event first.
  • Resolved an issue that caused an error when uploading an MSI file with a SHA256 signature.
  • Users can now select secure Computer Groups on the Policy Details page for Computer Groups targeted.
  • Previously, a valid signature had to be valid if any signature was present, regardless of the settings. Now, if the setting to require agent event signature is off, both missing an invalid signatures are ignored.

Agent Specific

Windows

  • HTML-based actions now pop up in the foreground. Additionally, icons for the user interface have been added to the task tray.
  • Elevation of programs located on remote network shares is now working properly across all known and commonly used server and share configurations.
  • The icons correctly display on the Privilege Manager Remove Programs Utility.
  • The Agent Utility now reflects any policy updates that have occurred since the utility was started.
  • Resolved an issue with the update utility for Dell BIOS updates.

macOS

  • Fixed an issue where incorrect permissions prevented some administrators from editing the macOS Agent Configuration.

Known Issues

  • There is a security issue with Windows Core agent versions 13.0.1058 and older. A fix for this issue is included in v12 versions 12.0.5804 and newer, and v13 versions 13.0.2064 and newer of the Windows Core agent which is available on the Software Downloads page.

    Delinea recommends customers who cannot immediately upgrade to use group policy or device management tooling to take the following actions on their workstations running the Privilege Manager Windows agent:

    This workaround covers remote connections. For coverage against a local connection, upgrading the Window Core agent is required.

    • Privilege Manager Cloud: Block inbound TCP on port 5593. There is no degradation in function from blocking the port.

    • Privilege Manager On-premises: Block inbound TCP on port 5593, or at least restrict it to your Privilege Managerr web server IP address. If you block the port, agents pull updates from the server based on a set schedule.

  • Computational errors will occur with running local processes that access any of the content on the drive letter made available via Google Drive for Desktop. For example, file inventory operations will fail to access Google Drive for Desktop.
  • Policies intended to elevate, require approval/justification, or block/deny access to the entire Control Panel or to specific applets within it such as Set Time & Date and Time zone. Advanced System Settings may not work 100% of them the time due to how Microsoft has been evolving the implementation of the Control Panel and the System Settings tools.